summaryrefslogtreecommitdiffstats
path: root/ChangeLog.rss
diff options
context:
space:
mode:
Diffstat (limited to 'ChangeLog.rss')
-rw-r--r--ChangeLog.rss56
1 files changed, 54 insertions, 2 deletions
diff --git a/ChangeLog.rss b/ChangeLog.rss
index 9ca0e67ab..6258e8e29 100644
--- a/ChangeLog.rss
+++ b/ChangeLog.rss
@@ -11,10 +11,62 @@
<description>Tracking Slackware development in git.</description>
<language>en-us</language>
<id xmlns="http://www.w3.org/2005/Atom">urn:uuid:c964f45e-6732-11e8-bbe5-107b4450212f</id>
- <pubDate>Wed, 6 Oct 2021 19:25:04 GMT</pubDate>
- <lastBuildDate>Thu, 7 Oct 2021 06:59:48 GMT</lastBuildDate>
+ <pubDate>Fri, 8 Oct 2021 03:23:28 GMT</pubDate>
+ <lastBuildDate>Fri, 8 Oct 2021 06:59:35 GMT</lastBuildDate>
<generator>maintain_current_git.sh v 1.12</generator>
<item>
+ <title>Fri, 8 Oct 2021 03:23:28 GMT</title>
+ <pubDate>Fri, 8 Oct 2021 03:23:28 GMT</pubDate>
+ <link>https://git.slackware.nl/current/tag/?h=20211008032328</link>
+ <guid isPermaLink="false">20211008032328</guid>
+ <description>
+ <![CDATA[<pre>
+n/httpd-2.4.51-x86_64-1.txz: Upgraded.
+ SECURITY: CVE-2021-42013: Path Traversal and Remote Code
+ Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete
+ fix of CVE-2021-41773) (cve.mitre.org)
+ It was found that the fix for CVE-2021-41773 in Apache HTTP
+ Server 2.4.50 was insufficient. An attacker could use a path
+ traversal attack to map URLs to files outside the directories
+ configured by Alias-like directives.
+ If files outside of these directories are not protected by the
+ usual default configuration "require all denied", these requests
+ can succeed. If CGI scripts are also enabled for these aliased
+ pathes, this could allow for remote code execution.
+ This issue only affects Apache 2.4.49 and Apache 2.4.50 and not
+ earlier versions.
+ Credits: Reported by Juan Escobar from Dreamlab Technologies,
+ Fernando MuA+-oz from NULL Life CTF Team, and Shungo Kumasaka
+ For more information, see:
+ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42013
+ (* Security fix *)
+ </pre>]]>
+ </description>
+ </item>
+ <item>
+ <title>Thu, 7 Oct 2021 19:12:20 GMT</title>
+ <pubDate>Thu, 7 Oct 2021 19:12:20 GMT</pubDate>
+ <link>https://git.slackware.nl/current/tag/?h=20211007191220</link>
+ <guid isPermaLink="false">20211007191220</guid>
+ <description>
+ <![CDATA[<pre>
+a/kernel-generic-5.14.10-x86_64-1.txz: Upgraded.
+a/kernel-huge-5.14.10-x86_64-1.txz: Upgraded.
+a/kernel-modules-5.14.10-x86_64-1.txz: Upgraded.
+d/kernel-headers-5.14.10-x86-1.txz: Upgraded.
+k/kernel-source-5.14.10-noarch-1.txz: Upgraded.
+kde/kio-5.86.0-x86_64-3.txz: Rebuilt.
+ Allow changing panel launcher icons. Thanks to RadicalDreamer and ctrlaltca.
+n/epic5-2.1.6-x86_64-1.txz: Upgraded.
+n/gnupg2-2.2.32-x86_64-1.txz: Upgraded.
+xap/xpaint-3.1.4-x86_64-1.txz: Upgraded.
+isolinux/initrd.img: Rebuilt.
+kernels/*: Upgraded.
+usb-and-pxe-installers/usbboot.img: Rebuilt.
+ </pre>]]>
+ </description>
+ </item>
+ <item>
<title>Wed, 6 Oct 2021 19:25:04 GMT</title>
<pubDate>Wed, 6 Oct 2021 19:25:04 GMT</pubDate>
<link>https://git.slackware.nl/current/tag/?h=20211006192504</link>